For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mbamusa_59409's avatar
mbamusa_59409
Icon for Nimbostratus rankNimbostratus
Nov 02, 2010

packet filter based on URL

HI ALL ,     i have a web site published over the internet (ie www.mysite.com)and i want to prevent access to some suburl (ie. www.mysite.com/admin)for this website to be accessed from outside ...
application delivery
dev
devops
iRules
Chris_Miller's avatar
Chris_Miller
Icon for Altostratus rankAltostratus
Nov 02, 2010
Here's an iRule to accomplish it. 


when HTTP_REQUEST {
   if { [HTTP::host] eq "www.mysite.com" and [HTTP::uri] starts_with "/admin" and ![class match [IP::client_addr] eq inside_addresses] } {
     discard }}

This requires that you create an address-type "datagroup" containing the IPs you want to allow. Let me know if you have any issues.